商业安全合作伙伴
Business Security Partner
在Netflix,我们的使命是娱乐全世界。我们正在书写下一章——突破叙事、全球粉丝和想象的边界,让不可能成为现实。我们是一支梦想团队,痴迷于探索创意、直觉和尖端技术融合时会发生什么的令人不安的兴奋感。加入我们,成为未来的一部分。
### 团队
Netflix的业务安全合作伙伴(BSP)团队是由高级安全顾问组成,按照业务接近性而非技术领域进行组织。每位BSP合作伙伴负责与特定业务单元组合的关系,与业务单元领导建立长期关系,并作为安全专家,深入了解这些业务,以便在决策前提供建议。我们参与业务评审,参与架构讨论,并与利益相关者建立信任,使安全成为一种资源,而不是一种要求。
在所有关系中,目标都是一样的:Netflix的每个重大业务决策都应该能够获得清晰、可用的安全风险背景;不是埋藏在文档中的合规输出,而是来自了解风险和业务的合作伙伴的可操作指导。
### 角色介绍
该职位涵盖Netflix内部两个截然不同且快速发展的领域:营销和动画。BSP根据需求进行覆盖,通常会轮换业务单元。在你在Netflix期间,你可能会负责其他领域。BSP在推动业务成果的同时,合理控制风险。
在营销方面,你将成为消费者产品、品牌、活动、体验和社交媒体团队,以及接触发布前活动内容的外部代理和供应商生态系统的首要安全合作伙伴。你将就营销团队正在构建和采用的生成式AI工具的安全风险提供建议,评估处理敏感创意资产的供应商和业务流程外包合作伙伴,并管理保护Netflix社交媒体账户的访问控制。
在动画方面,你将作为Netflix动画的专职安全合作伙伴。你的工作将涵盖动画制作流程的安全风险评估,推进传统系统与Netflix标准的对齐,并就影响发布前动画内容保护的架构决策提供建议。变化的速度很快,无论是业务还是传统系统整合工作。你的能力将被高度依赖。
查看英文原文
At Netflix, our mission is to entertain the world. Together, we are writing the next episode - pushing the boundaries of storytelling, global fandom and making the unimaginable a reality. We are a dream team obsessed with the uncomfortable excitement of discovering what happens when you merge creativity, intuition and cutting-edge technology. Come be a part of what’s next.
### The Team
Netflix’s Business Security Partner (BSP) team is a team of senior security advisors organized around business proximity rather than technical domains. Each BSP partner owns relationships with a defined portfolio of business units, builds long-term relationships with BU leadership, and serves as the security export who understands those businesses well enough to advise on decisions before they are made. We sit in business reviews, participate in architecture conversations, and build the kind of trust with stakeholders that makes security a resource rather than a requirement.
Across all of our relationships, the goal is the same: every major business decision at Netflix should have access to clear, usable security risk context; not a compliance output buried in a document, but actionable guidance from a partner who understands both the risk and the business.
### About the Role
This role covers two distinct, fast-moving areas within Netflix: Marketing and Animation. BSP aligns coverage based on need and often rotates business units. You may cover other areas during your time at Netflix. BSP right-sizes risk while enabling business outcomes.
On the Marketing side, you will be the primary security partner for teams spanning Consumer Products, Brand, Events, Experiences, and Social Media, as well as the external agency and vendor ecosystems that touch pre-release campaign content. You will advise on the security risk of GenAI tools Marketing teams are actively building and adopting, assess vendors and Business Process Outsourcing partners handling sensitive creative assets, and govern the access controls that protect Netflix’s social media accounts.
For Animation, you will partner with Netflix Animation as its dedicated security partner. Your work will span security risk assessment of the animation production pipeline, advancing the alignment of legacy systems with Netflix standards, and advising on architectural decisions that affect how pre-release animated content is protected. The pace of change is high, both in the business and in the legacy integration work. Your ability to engage credibly with engineering and leadership on complex, technically interdependent risk is essential.
This role also carries M&A responsibilities. BSPs at Netflix are expected to support technical security due diligence for acquisitions and subsidiaries.
### What You Will Work On:
- Own the security partnership for Marketing and Animation, building stakeholder relationships, learning how these businesses operate, and translating that context into opinionated security guidance.
- Lead security risk assessments and treatment strategies with cross-functional teams as they launch new capabilities and tools.
- Evaluate and advise on the security risk of GenAI tool adoption across both business units. Set conditions of approval, assess training data provenance and data handling, and partner with Legal and Privacy on unified guidance.
- Maintain and evolve the Business Risk Profile for each business unit, prioritizing and driving remediation of the risks that matter most.
- Advance pre-release content protection in partnership across both business units: campaign assets and creative content in Marketing, and animation production pipelines and studio workstation environments. Coordinate with Content Security and partner SPA teams to ensure controls match the sensitivity of what’s in scope.
- Support M&A technical security due diligence for acquisitions and subsidiaries.
- Develop reporting and metrics that communicate risk posture and business security initiatives to SPA leadership and business unit stakeholders.
### Desired Background:
- Experience operating as a security partner or advisor. You’ve built trust with business stakeholders, translated technical risk into business language, and driven decisions without direct authority.
- GenAI security depth. You have direct experience advising on or assessing security risks in GenAI systems. You can identify real risks and engage credibly with technical teams, legal, and privacy partners to mitigate them.
- Broad security domain knowledge across application security, cloud security, identity and access management, and data governance. You are comfortable operating across all of them and know when to go deep versus when to synthesize, practicing business awareness on how to communicate. You pull in domain experts from across the wider security organization, where needed, to help assess and address risks.
- Strong stakeholder partnership instincts. You build trust with the business by demonstrating that you understand their context, not just their security posture. You know how to translate a technical finding into a business decision, and back to the Security department for support.
- Comfort with ambiguity and novel technology environments. You have a framework for reasoning under uncertainty and for making recommendations when the answer isn't fully known.
- M&A or technical due diligence experience is a plus and not required.
Generally, our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range. The range for this role is $400,000.00 - $680,000.00. This compensation range will vary based on location.
Netflix provides comprehensive benefits including Health Plans, Mental Health support, a 401(k) Retirement Plan with employer match, Stock Option Program, Disability Programs, Health Savings and Flexible Spending Accounts, Family-forming benefits, and Life and Serious Injury Benefits. We also offer paid leave of absence programs. Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off. Full-time salaried employees are immediately entitled to flexible time off. See more details about our Benefits [here](https://jobs.netflix.com/work-life-philosophy).
Netflix is a unique culture and environment. Learn more [here](https://jobs.netflix.com/culture).
[Inclusion](https://about.netflix.com/en/inclusion) is a Netflix value and we strive to host a meaningful interview experience for all candidates. If you want an accommodation/adjustment for a disability or any other reason during the hiring process, please send a request to your recruiting partner.
We are an equal-opportunity employer and celebrate diversity, recognizing that diversity builds stronger teams. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.
Job is open for no less than 7 days and will be removed when the position is filled.